Differences between escape vs encodeURIComponent

This vector shows the differences between escape and encodeURIComponent

Created Oct 15, 2024

Updated May 27, 2025

Detecting browser...

CategoryXSS Execution

VisibilityPublic

TypeJS

CharsetUTF-8

Template used:

let chr = String.fromCodePoint($[i]);0x0D
escape(chr) !== encodeURIComponent(chr) && log($[i])

Sample payloads

let chr = String.fromCodePoint(33);0x0D
escape(chr) !== encodeURIComponent(chr) && alert(33)

let chr = String.fromCodePoint(43);0x0D
escape(chr) !== encodeURIComponent(chr) && alert(43)

let chr = String.fromCodePoint(47);0x0D
escape(chr) !== encodeURIComponent(chr) && alert(47)

let chr = String.fromCodePoint(64);0x0D
escape(chr) !== encodeURIComponent(chr) && alert(64)

let chr = String.fromCodePoint(126);0x0D
escape(chr) !== encodeURIComponent(chr) && alert(126)